Extracted

• • Target

    7c645c119d3bb3159b1f122923cf8d50e43a56fda1aa29daa3e8044bfae9e6d1

  • Size

    256KB

  • MD5

    fa8e937e72b13207cd4f3dd776691dc2

  • SHA1

    afdea40bf492e0ce5dfbf8585f1b1a73c79d7bf7

  • SHA256

    7c645c119d3bb3159b1f122923cf8d50e43a56fda1aa29daa3e8044bfae9e6d1

  • SHA512

    4aa16b12bc8602ab8ac3633a2553e979565803e477f996f9da347695056b1db0238ea113643fcb4119f40c8a521d987618651418060678c9762d4390b8d7bc07

  • SSDEEP

    6144:WZkFRbXfb7wzY1FJRRBx5oUsWW5W8g4/ve7:WZcpXGY1FJRTtsWWj

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2